@sebastienrousseau/dotfiles 0.2.481 → 0.2.499

package/README.md

@@ -1,315 +0,0 @@
-<p align="right">
-  <img src="https://kura.pro/dotfiles/v2/images/logos/dotfiles.svg" alt="Dotfiles logo" width="64" />
-</p>
-
-# Dotfiles — A Fast, Idempotent Shell Environment
-
-[![Build](https://img.shields.io/github/actions/workflow/status/sebastienrousseau/dotfiles/ci.yml?style=for-the-badge)](https://github.com/sebastienrousseau/dotfiles/actions)
-[![Version](https://img.shields.io/badge/Version-v0.2.481-blue?style=for-the-badge)](https://github.com/sebastienrousseau/dotfiles/releases/tag/v0.2.481)
-[![License](https://img.shields.io/badge/License-MIT-green.svg?style=for-the-badge)](LICENSE)
-[![Release Downloads](https://img.shields.io/github/downloads/sebastienrousseau/dotfiles/total?style=for-the-badge)](https://github.com/sebastienrousseau/dotfiles/releases)
-[![Last Commit](https://img.shields.io/github/last-commit/sebastienrousseau/dotfiles?style=for-the-badge)](https://github.com/sebastienrousseau/dotfiles/commits)
-
----
-
-## Overview
-
-Set up your development environment in minutes and keep it consistent across every machine. Dotfiles is a cross‑platform shell distribution managed by [Chezmoi](https://github.com/twpayne/chezmoi) that works on macOS, Linux, and WSL. It is **idempotent** by design: run it once or a hundred times, and the result is always the same.
-
-Git + templates + guarded scripts = a reproducible shell.
-
----
-
-## Table of contents
-
-- [Why dotfiles](#why-dotfiles)
-- [Safety](#safety)
-- [Get started](#get-started)
-- [Discover](#discover)
-- [Install details](#install-details)
-- [Make it yours](#make-it-yours)
-- [Reference](#reference)
-- [How it works](#how-it-works)
-- [Roadmap](#roadmap)
-- [Contribute](#contribute)
-- [Changelog](#changelog)
-- [License](#license)
-
----
-
-## Why dotfiles
-
-Dotfiles takes an infrastructure‑oriented approach to managing your shell. It is designed for developers who work across multiple machines and value **daily usability, reproducibility, and auditability.**
-
-- **The Stack.** Zsh, Neovim, tmux, and AI CLI tools configured with sane defaults so you can start working immediately.
-- **Unified Control.** The `dot` CLI wraps common workflows such as syncing, upgrading, and managing secrets.
-- **Safety First.** Every system or security change requires explicit opt‑in.
-- **Clean Slate.** Source files, generated configs, and system state stay cleanly separated.
-
-
-## Safety
-
-This is **infrastructure**, not an ad‑hoc shell script.
-
-- No destructive actions without explicit opt‑in.
-- No background daemons install automatically.
-- No system settings change by default.
-- System‑level behavior requires explicit opt‑in through environment variables.
-- Dotfiles logs all privileged actions to `~/.local/share/dotfiles.log`.
-
----
-
-## Get started
-
-> [!IMPORTANT]
-> The installer automatically backs up any existing dotfiles that chezmoi will overwrite (to `~/.dotfiles.bak.<timestamp>/`). It bootstraps `chezmoi` and applies this repo. OS packages install through Chezmoi hooks during the first apply.
-
-```bash
-# Works on macOS, Linux, and WSL
-sh -c "$(curl -fsSL https://raw.githubusercontent.com/sebastienrousseau/dotfiles/v0.2.481/install.sh)"
-exec zsh
-```
-
-For non‑interactive installs (servers and CI):
-```bash
-DOTFILES_NONINTERACTIVE=1 sh -c "$(curl -fsSL https://raw.githubusercontent.com/sebastienrousseau/dotfiles/v0.2.481/install.sh)"
-```
-
----
-
-## Discover
-
-- [Installation Guide](docs/INSTALL.md) — Prerequisites and supported platforms.
-- [Operations Guide](docs/OPERATIONS.md) — Common workflows and platform notes.
-- [Security Guide](docs/SECURITY.md) — Hardening matrix and logging.
-- [Secrets Guide](docs/SECRETS.md) — Age setup and encrypted files.
-- [Tools Catalog](docs/TOOLS.md) — Core tools and optional utilities.
-- [Dot Utils](docs/UTILS.md) — Aliases and dot CLI helpers.
-- [Troubleshooting](docs/TROUBLESHOOTING.md) — Fixes for common issues.
-
----
-
-## Install details
-
-**Prerequisites**
-- Required: `git`, `curl`
-- Optional: Homebrew (macOS), `apt-get` (Linux/WSL), Nix (toolchain)
-
-**Update**
-```bash
-dot update
-```
-
-**Non‑interactive apply**
-```bash
-DOTFILES_NONINTERACTIVE=1 dot apply
-```
-
-## Make it yours
-
-- [Operations](docs/OPERATIONS.md)
-- [Secrets](docs/SECRETS.md)
-- [Security](docs/SECURITY.md)
-- [Troubleshooting](docs/TROUBLESHOOTING.md)
-
----
-
-## Reference
-
-Run `dot --help` or `dot <command> --help` for inline documentation.
-
-| Command | Description | Category |
-|---|---|---|
-| `dot apply` | Apply dotfiles (chezmoi apply) | Core |
-| `dot sync` | Alias of apply | Core |
-| `dot update` | Pull latest changes and apply | Core |
-| `dot add` | Add a file to chezmoi source | Core |
-| `dot diff` | Show chezmoi diff (excludes scripts) | Core |
-| `dot status` | Show configuration drift | Core |
-| `dot remove` | Safely remove a managed file | Core |
-| `dot cd` | Print source directory path | Core |
-| `dot upgrade` | Update flake, plugins, and dotfiles | Core |
-| `dot edit` | Open chezmoi source in your editor | Core |
-| `dot docs` | Show repo README | Core |
-| `dot --version` | Show version information | Core |
-| `dot help` | Show help | Core |
-| `dot drift` | Drift dashboard (chezmoi status) | Diagnostics |
-| `dot history` | Shell history analysis | Diagnostics |
-| `dot doctor` | Check system health and configuration | Diagnostics |
-| `dot health` | Comprehensive health dashboard (37 checks) | Diagnostics |
-| `dot security-score` | Security assessment with grading | Diagnostics |
-| `dot benchmark` | Shell startup benchmark (`--detailed`, `--profile`) | Diagnostics |
-| `dot restore` | Restore from backup or git ref | Diagnostics |
-| `dot theme` | Switch terminal theme (dark/light) | UX |
-| `dot wallpaper` | Apply a wallpaper from your library | UX |
-| `dot keys` | Show keybindings catalog | UX |
-| `dot learn` | Interactive tour of tools (requires `gum`) | UX |
-| `dot fonts` | Install Nerd Fonts | UX |
-| `dot sandbox` | Launch a safe sandbox preview | Tools |
-| `dot tools` | Show tools or install through Nix | Tools |
-| `dot tools install` | Enter Nix development shell | Tools |
-| `dot new` | Create a new project from a template | Tools |
-| `dot log-rotate` | Rotate `~/.local/share/dotfiles.log` | Tools |
-| `dot secrets-init` | Initialise age key for secrets | Secrets |
-| `dot secrets` | Edit encrypted secrets | Secrets |
-| `dot secrets-create` | Create an encrypted secrets file | Secrets |
-| `dot ssh-key` | Encrypt an SSH key locally with age | Secrets |
-| `dot backup` | Create a compressed backup of your home directory | Security |
-| `dot firewall` | Apply firewall hardening (opt‑in) | Security |
-| `dot telemetry` | Disable OS telemetry (opt‑in) | Security |
-| `dot dns-doh` | Enable DNS‑over‑HTTPS (opt‑in) | Security |
-| `dot encrypt-check` | Check disk encryption status | Security |
-| `dot lock-screen` | Enforce lock‑screen idle settings (opt‑in) | Security |
-| `dot usb-safety` | Disable automount for removable media | Security |
-
-### Developer CLI Tools
-
-These utilities are installed to `~/.local/bin/`:
-
-| Tool | Description |
-|------|-------------|
-| `jsonv` | JSON validator and formatter |
-| `yamlv` | YAML validator |
-| `epoch` | Unix timestamp converter |
-| `b64` | Base64 encoder/decoder |
-| `jwt` | JWT token decoder |
-| `hex` | Hex viewer/converter |
-| `regex` | Regex tester |
-| `lorem` | Lorem ipsum generator |
-| `uuid` | UUID generator |
-| `hash` | MD5/SHA hash calculator |
-| `ip` | Show public/local IP addresses |
-| `kill-port` | Kill process by port |
-| `extract` | Universal archive extraction |
-| `update` | Update all system packages |
-
-**Examples**
-
-```bash
-# Initialise secrets (prints a public key)
-DOTFILES_NONINTERACTIVE=1 dot secrets-init
-# Output: Age key created at ~/.config/chezmoi/key.txt
-```
-
-### Security changes
-
-These scripts are **opt‑in** and run only when you set the matching environment variable.
-All security changes are logged to `~/.local/share/dotfiles.log`.
-
-| Script | macOS | Linux |
-|---|---|---|
-| `dot firewall` | Enables macOS firewall and stealth mode via `socketfilterfw` | Configures UFW defaults and OpenSSH allow |
-| `dot telemetry` | Writes `DiagnosticMessagesHistory.plist` flags | Disables `whoopsie`, `apport`, `popularity-contest` |
-| `dot dns-doh` | No system change (browser‑level only) | Enables DoH via `resolvectl` with Cloudflare DNS |
-| `dot lock-screen` | `com.apple.screensaver` defaults and idleTime | GNOME `gsettings` lock and idle timeout |
-| `dot usb-safety` | No system change (manual UI) | GNOME `gsettings` automount off |
-| `dot encrypt-check` | Reads FileVault status via `fdesetup` | Detects LUKS via `lsblk` |
-
-### Nix
-
-Nix is **optional**. The repo does **not** install the Nix daemon.
-
-- Use `nix develop` to enter a reproducible shell environment.
-- Use `dot tools` to see the curated utilities overview.
-- No toggle replaces Homebrew or Apt with Nix automatically.
-
----
-
-### Install guide
-
-See [docs/INSTALL.md](docs/INSTALL.md) for prerequisites, supported platforms, and the full install flow.
-
-<p align="right"><a href="#dotfiles--your-shell-everywhere">↑ Back to Top</a></p>
-
-## How it works
-
-If Mermaid does not render, the flow is: `install.sh` → `Chezmoi` → `~/.dotfiles` → `~/.config + ~/.local`.
-
-```mermaid
-flowchart LR
-  A["install.sh"] --> B["Chezmoi"]
-  B --> C["~/.dotfiles (source)"]
-  B --> D["~/.config + ~/.local (targets)"]
-  E["dot CLI"] --> B
-  E --> F["scripts/*"]
-```
-
-### Shell startup flow
-
-```
-.zshenv ─▶ .zshrc ─▶ rc.d/{10..50} ─▶ shell/{00,05,40,50,90} ─▶ [precmd: 91-lazy] ─▶ tool init
-   │          │            │                    │                        │                   │
-   │          │            │                    │                        │                   ├─ atuin
-  XDG      zinit      options,            paths, safety,          tool-specific          ├─ starship
-  PATH     plugins    lazy fnm/nvm        functions,              aliases (deferred)     ├─ zoxide
-                                          core aliases (eager)                           └─ fzf
-```
-
-Core aliases (~40KB) load at startup. Tool-specific aliases (~137KB) load after the first prompt via a `precmd` hook — keeping shell startup fast while still providing full alias coverage. See [docs/ARCHITECTURE.md](docs/ARCHITECTURE.md) for the full startup sequence and ordering conventions.
-
-**Repository Layout**
-
-```text
-~/.dotfiles/
-├── dot_config/                 # Maps to ~/.config/ (app configs)
-│   ├── nvim/                    # Neovim config (Lua)
-│   ├── zsh/                     # Zsh config (modular)
-│   ├── tmux/                    # Tmux config
-│   ├── shell/                   # Shell logic (aliases, functions, paths)
-│   ├── wezterm/ alacritty/ kitty/ ghostty/
-│   ├── btop/ fastfetch/ atuin/ yazi/ ...
-│   └── docker/ containers/ ...
-├── dot_local/                  # Maps to ~/.local/ (CLI tools)
-│   └── bin/                     # dot CLI and helpers
-├── dot_etc/                    # System configs (sudoers, sysctl, Chrome policies; may require sudo)
-├── dot_ssh/                    # SSH config templates
-├── templates/                  # Project scaffolds used by `dot new`
-├── scripts/                    # Install, security, theme, diagnostics
-├── install/                    # Chezmoi run_onchange and run_before hooks
-├── nix/                        # Optional Nix shell environment
-├── docs/                       # Guides, keys, roadmap, architecture
-└── install.sh                  # Bootstrap installer
-```
-
----
-
-## Roadmap
-
-Track progress on [GitHub Issues](https://github.com/sebastienrousseau/dotfiles/issues) and [Milestones](https://github.com/sebastienrousseau/dotfiles/milestones).
-
----
-
-## Contribute
-
-Please read [CONTRIBUTING.md](.github/CONTRIBUTING.md) before opening a pull request.
-
-For security issues, see [SECURITY.md](.github/SECURITY.md).
-
----
-
-## Troubleshooting
-
-See [docs/TROUBLESHOOTING.md](docs/TROUBLESHOOTING.md).
-
----
-
-## Changelog
-
-See [CHANGELOG.md](CHANGELOG.md).
-
----
-
-## License
-
-This project is licensed under the **MIT License**. See [LICENSE](LICENSE).
-
-Some bundled third‑party dependencies are licensed under GPL‑3.0; the LICENSE file lists them explicitly.
-
----
-
-<div align="center">
-
-🎨 Designed by **[Sebastien Rousseau](https://sebastienrousseau.com/)**
-🚀 Engineered with **[Euxis](https://euxis.co/)** — Enterprise Unified eXecution Intelligence System
-
-</div>

package/docs/ALIASES.md

@@ -1,128 +0,0 @@
-# Aliases
-
-This page lists all shell aliases that the dotfiles provide.
-
-## Organization
-
-The repo organizes aliases in `~/.dotfiles/.chezmoitemplates/aliases/` by category. Each category has its own directory containing a `<name>.aliases.sh` file.
-
-## Categories
-
-### Navigation
-
-| Alias | Command | Description |
-|-------|---------|-------------|
-| `..` | `cd ..` | Go up one directory |
-| `...` | `cd ../..` | Go up two directories |
-| `....` | `cd ../../..` | Go up three directories |
-| `-` | `cd -` | Go to previous directory |
-
-### Git
-
-| Alias | Command | Description |
-|-------|---------|-------------|
-| `g` | `git` | Git shorthand |
-| `ga` | `git add` | Stage files |
-| `gaa` | `git add --all` | Stage all files |
-| `gc` | `git commit` | Commit |
-| `gcm` | `git commit -m` | Commit with message |
-| `gco` | `git checkout` | Checkout |
-| `gd` | `git diff` | Show diff |
-| `gf` | `git fetch` | Fetch |
-| `gl` | `git pull` | Pull |
-| `gp` | `git push` | Push |
-| `gst` | `git status` | Status |
-| `lg` | `git log --graph --oneline` | Graph log |
-| `lgui` | `lazygit` | Open lazygit |
-
-### Docker
-
-| Alias | Command | Description |
-|-------|---------|-------------|
-| `d` | `docker` | Docker shorthand |
-| `dco` | `docker compose` | Docker Compose |
-| `dps` | `docker ps` | List containers |
-| `dpsa` | `docker ps -a` | List all containers |
-| `di` | `docker images` | List images |
-| `dexec` | `docker exec -it` | Execute in container |
-| `denter` | `docker exec -it <container> /bin/bash` | Enter container |
-| `dlogsf` | `docker logs -f` | Follow logs |
-| `dl` | `docker logs` | Show logs |
-| `dprune` | `docker system prune` | Clean up |
-| `dprunea` | `docker system prune -a` | Clean up all |
-| `lzd` | `lazydocker` | Open lazydocker |
-
-### Kubernetes
-
-| Alias | Command | Description |
-|-------|---------|-------------|
-| `k` | `kubectl` | kubectl shorthand |
-| `kg` | `kubectl get` | Get resources |
-| `kgp` | `kubectl get pods` | Get pods |
-| `kga` | `kubectl get all` | Get all resources |
-| `kd` | `kubectl describe` | Describe resource |
-| `kdel` | `kubectl delete` | Delete resource |
-| `kl` | `kubectl logs` | View logs |
-| `kex` | `kubectl exec -it` | Execute in pod |
-| `kaf` | `kubectl apply -f` | Apply from file |
-| `kctx` | `kubectx` | Switch context |
-| `kn` | `kubens` | Switch namespace |
-| `klog` | `stern` | Multi-pod logs |
-| `klint` | `kube-linter lint` | Lint manifests |
-| `ksec` | `kubesec scan` | Security scan |
-| `mk` | `minikube` | Minikube shorthand |
-| `k9` | `k9s` | Open k9s |
-
-### Modern replacements
-
-| Alias | Command | Description |
-|-------|---------|-------------|
-| `ls` | `eza` | Modern ls |
-| `ll` | `eza -la` | Long list |
-| `la` | `eza -a` | List all |
-| `lt` | `eza --tree` | Tree view |
-| `cat` | `bat` | Syntax highlighted cat |
-
-### File operations
-
-| Alias | Command | Description |
-|-------|---------|-------------|
-| `cp` | `cp -iv` | Interactive verbose copy |
-| `mv` | `mv -iv` | Interactive verbose move |
-| `rm` | `rm -iv` | Interactive verbose remove |
-| `mkdir` | `mkdir -pv` | Create dirs with parents |
-
-### System
-
-| Alias | Command | Description |
-|-------|---------|-------------|
-| `ports` | `netstat -tulanp` | Show open ports |
-| `myip` | `curl ifconfig.me` | Show public IP |
-| `path` | `echo $PATH \| tr ':' '\n'` | Show PATH entries |
-
-### Dotfiles
-
-| Alias | Command | Description |
-|-------|---------|-------------|
-| `dot` | `~/.local/bin/dot` | Dotfiles CLI |
-| `dotcd` | `cd ~/.dotfiles` | Go to dotfiles |
-| `dotedit` | `$EDITOR ~/.dotfiles` | Edit dotfiles |
-
-## Adding custom aliases
-
-1. Create a new file in the appropriate category:
-   ```bash
-   vim ~/.dotfiles/.chezmoitemplates/aliases/mycategory/mycategory.aliases.sh
-   ```
-
-2. Define your aliases:
-   ```bash
-   # shellcheck shell=bash
-   # My Custom Aliases
-   alias myalias='my-command'
-   ```
-
-3. Apply changes:
-   ```bash
-   chezmoi apply
-   ```

package/docs/FEATURES.md

@@ -1,166 +0,0 @@
-# Feature Flags
-
-Feature flags control which components and configurations are enabled in your dotfiles setup. They are defined in `.chezmoidata.toml` and used throughout template files to conditionally include or exclude functionality.
-
-## Configuration
-
-Feature flags are configured in the `.chezmoidata.toml` file:
-
-```toml
-[features]
-zsh = true
-nvim = true
-tmux = true
-gui = true
-secrets = true
-```
-
-## Available Feature Flags
-
-| Flag | Default | Purpose | Dependencies | Impact |
-|------|---------|---------|--------------|---------|
-| `zsh` | `true` | Enable Zsh shell configuration and optimizations | - | Controls Zsh-specific configs, aliases, and shell enhancements |
-| `nvim` | `true` | Enable Neovim editor configuration | - | Manages Neovim configs, plugins, and editor-specific settings |
-| `tmux` | `true` | Enable tmux terminal multiplexer configuration | - | Controls tmux configs, key bindings, and session management |
-| `gui` | `true` | Enable GUI application configurations | Desktop environment | Manages GUI app configs, window managers, and desktop settings |
-| `secrets` | `true` | Enable secrets management and encryption tools | GPG, Age, SSH keys | Controls access to encrypted configs and secure credential storage |
-
-## How Feature Flags Work
-
-### Template Processing
-
-Feature flags are processed in the Zsh configuration template (`dot_config/zsh/dot_zshrc.tmpl`) where they:
-
-1. **Set defaults**: If not explicitly defined, all features default to `true`
-2. **Export environment variables**: Active features are exported as `DOTFILES_FEATURES`
-3. **Enable conditional loading**: Allow selective inclusion of shell configurations
-
-### Example Usage
-
-```bash
-# In template files, feature flags are referenced as:
-{{- $features := default (dict "zsh" true "nvim" true "tmux" true "gui" true "secrets" true) .features -}}
-
-# Export enabled features to environment
-export DOTFILES_FEATURES="{{ join "," $enabled }}"
-```
-
-### Runtime Access
-
-Once processed, you can check active features in your shell:
-
-```bash
-# View all enabled features
-echo $DOTFILES_FEATURES
-
-# Check if a specific feature is enabled
-if [[ "$DOTFILES_FEATURES" == *"nvim"* ]]; then
-    echo "Neovim configuration is active"
-fi
-```
-
-## Modifying Feature Flags
-
-### Enable/Disable Features
-
-Edit `.chezmoidata.toml`:
-
-```toml
-[features]
-zsh = true
-nvim = true
-tmux = false    # Disable tmux configuration
-gui = false     # Disable GUI configurations
-secrets = true
-```
-
-### Apply Changes
-
-After modifying feature flags, apply the changes:
-
-```bash
-chezmoi apply
-```
-
-### Profile-Specific Overrides
-
-For machine-specific configurations, you can override feature flags in your local chezmoi config (`~/.config/chezmoi/chezmoi.toml`):
-
-```toml
-[data.features]
-gui = false  # Override: disable GUI on this machine
-```
-
-## Feature Flag Dependencies
-
-### Core Dependencies
-
-- **zsh**: Core shell functionality - recommended to keep enabled
-- **nvim**: Independent - can be disabled if using alternative editors
-- **tmux**: Independent - can be disabled if not using terminal multiplexer
-
-### Conditional Dependencies
-
-- **gui**: Requires desktop environment; automatically ignored on headless systems
-- **secrets**: Required for encrypted configurations; disable only if not using secure storage
-
-## Architecture Notes
-
-### Default Behavior
-
-The feature flag system uses a **fail-safe default** approach:
-- If `.chezmoidata.toml` is missing features, all flags default to `true`
-- This ensures the dotfiles work out-of-the-box without configuration
-
-### Performance Impact
-
-- **Enabled features**: Include additional configurations and may load more shell plugins
-- **Disabled features**: Reduce startup time and memory usage by excluding unnecessary components
-
-### Template Resolution
-
-Feature flags are resolved during chezmoi template processing, not at runtime. This means:
-- Changes require `chezmoi apply` to take effect
-- No runtime performance penalty for checking feature status
-- Configurations are pre-compiled based on active features
-
-## Troubleshooting
-
-### Check Current Features
-
-```bash
-# View active features
-echo $DOTFILES_FEATURES
-
-# View profile and theme
-echo "Profile: $DOTFILES_PROFILE"
-echo "Theme: $DOTFILES_THEME"
-```
-
-### Verify Configuration
-
-```bash
-# Check chezmoi data
-chezmoi data
-
-# Test template processing
-chezmoi execute-template '{{ .features.zsh }}'
-```
-
-### Reset to Defaults
-
-If you encounter issues, reset to default configuration:
-
-```toml
-[features]
-zsh = true
-nvim = true
-tmux = true
-gui = true
-secrets = true
-```
-
----
-
-**Last Updated**: 2026-01-31
-**Dotfiles Version**: v0.2.480